Privacy Policy

This Privacy Policy explains how Koldemails ("we," "us," koldemails.com) handles information when you use our website and tools. We've tried to write it in plain English.

1. Information our browser tools do NOT collect

The data you paste into our browser tools (email lists, email drafts, domains, campaign numbers) is processed entirely in your browser. We do not receive it, store it, or have any way to access it. Closing the tab clears it.

2. Information we do collect

• Contact information. If you email us (e.g. hello@koldemails.com), we receive your email address and whatever you include in your message.
• Basic usage analytics. We use Google Analytics 4 to understand which pages and tools are used: page views, scrolls, outbound clicks and similar events, plus approximate location, device and browser. It never sees what you type or paste into a tool. We look at aggregate reports only, and we do not turn on Google's advertising features or build advertising profiles. You can opt out with Google's opt-out browser add-on.
• Server logs. Our hosting provider may automatically log standard technical data (IP address, browser type, timestamps) for security and reliability.
• Kold Website Visitor Identification. If you use Kold Website Visitor Identification, or visit a website that uses it, we collect the data described in section 4.

3. Third-party services our tools call

Some tools make live technical lookups. To do so, they send only the minimum data needed, never your full lists:

• DNS lookups. Tools like the email verifier and domain checkers query public DNS over HTTPS (Cloudflare and Google resolvers). These requests contain only domain names (e.g. example.com), never full email addresses.
• Domain registry (RDAP). Domain age/availability tools query public domain registries, sending only the domain name being checked.
• Hosting. The site is hosted on Vercel, which processes standard request data as described above.
• Fonts. We load web fonts from Fontshare and Google Fonts, which may receive your IP address as part of serving the font files.
• Analytics. Google Analytics (Google LLC) receives page-view and event data, your IP address and browser details to produce our usage reports. See how Google uses this data.

4. Kold Website Visitor Identification

Kold Website Visitor Identification (visitors.koldemails.com) is a web app you sign in to with Google. It opens soon, and this section sets out how it handles data once it does. When you sign in, we store your Google name, email address and profile picture. Website owners add its script to their sites to see which companies visit them. On those sites, we store:

• Visits. The pages viewed and time on each, the referrer and UTM tags, and browser details (device, browser and operating system), so the website owner sees what each visitor read.
• IP address. We look it up in public reverse DNS and internet registry (RDAP) records to find the company that owns the network. It also gives an approximate location (city, region and country).
• A visitor ID. A random ID kept in a first-party cookie, renewed for 365 days on each visit, and in the browser's local storage, to spot return visits.
• Emails typed into forms. If you type your email into a form on one of these sites, we save it, with any name, company or job title fields, as soon as you leave the email field, even if you never send the form. Forms with a password field are skipped, and website owners can turn this off.
• Named US visitors (paid plans, not live yet). Once paid plans open, US visits on those plans may be checked with data partners to find a named person. Browsers that send Global Privacy Control or Do Not Track are never checked.

We store this data with our hosting and database providers (Vercel and Neon) and keep it, with no automatic deletion. We send daily email summaries and team invites through Resend. A summary can list visitors' names or emails, job titles and companies. To ask for a copy or for deletion, email hello@koldemails.com.

Once it opens, you can opt out by entering your email at visitors.koldemails.com/opt-out. We then stop matching that email to visitors and hide visitors already matched to it from website owners' lists. To stop the script in one browser on one site, add ?kv_optout=1 to that site's address.

Website owners who install the script must tell their visitors about it in their own privacy policy. They agree to this when they add their site.

5. Cookies

We use minimal cookies or local storage where needed for the site and tools to function, plus Google Analytics cookies (_ga and _ga_*) that count visits. We do not use third-party advertising cookies. The Kold Website Visitor Identification script sets one first-party cookie and uses local storage on the websites that install it (section 4).

6. How we use information

We use the information we collect to respond to your messages, operate and improve the site and tools, and keep them secure. Kold Website Visitor Identification data is used as set out in section 4. We do not sell your personal information.

7. Data retention

We keep email correspondence only as long as needed to help you and for our records. Aggregate analytics are retained in non-identifying form. Kold Website Visitor Identification data is kept as set out in section 4.

8. Your rights

Depending on your location (for example under GDPR or CCPA), you may have rights to access, correct, or delete personal information we hold about you. To exercise them, email hello@koldemails.com.

9. Children

Our site is not directed to children under 13, and we do not knowingly collect their data.

10. Changes to this policy

We may update this policy from time to time. We'll revise the "Last updated" date above when we do.

11. Contact

Questions about this policy? Email hello@koldemails.com.